How Ezra Protects Creator Data

What Ezra accesses, and what it does not

When a creator connects an Instagram professional account, Ezra uses the Instagram API with Instagram Login and requests only the permissions the product needs:

• Basic profile and media (instagram_business_basic): the account's profile information and its published posts and media.
• Business insights (instagram_business_manage_insights): aggregate performance metrics for the account and its content, such as reach, views, and engagement.

Ezra does not request or hold any permission beyond these. In particular:

• Ezra does not access messages or direct messages. Ezra holds no messaging permission and never reads, stores, or processes private conversations.
• Ezra does not publish content, manage comments, or run ads on a creator's behalf.

Ezra processes this data for one purpose: to build and maintain the creator's own media kits, campaign reports, and pitches, which is what the creator connected their account for. This is consistent with Meta's Platform Terms, which permit processing platform data only for the purposes a user has consented to.

Media kits and campaign reports are private by default

Every media kit and campaign report that contains connected-account data is password protected by default. Only the people a creator or agency shares the password with can open it. The page is never listed publicly and cannot be found by anyone who has not been given access.

If a creator makes a kit public, insights stay out of search engines

A creator may choose to remove the password so a kit can be shared with a brand by a simple link. Even then, Ezra applies a second layer of protection. Any media kit or campaign report that displays connected-account insights is served with directives that instruct every search engine not to index it, not to follow it, and not to keep a cached copy:

noindex, nofollow, nocache

This means the page cannot be found through Google or any other search engine, cannot appear in search results, and leaves no cached copy of the insights data with any search engine. A public link works only for the person the creator chooses to hand it to. It never makes a creator's audience or performance data searchable or indexable anywhere on the web. Campaign reports are kept out of search engines in every case.

The same protection applies to any media kit or campaign report that displays TikTok or YouTube insights. The safeguard is triggered by the presence of connected-account insights, whatever the source platform.

Featured media kits on this site are demonstrations

The media kits featured on the Ezra website are shown to demonstrate Ezra's design and layout. Kits built on templates use sample figures that do not represent any real account. The creator kits shown use accounts owned by the Ezra team and people who have given their consent, displayed purely for demonstration. They do not show the private data of any third-party creator, and no external creator's connected-account data is exposed anywhere on this site.

Deleting your data

A creator can disconnect a connected account at any time, which immediately stops all further access. Connected-account data is kept only for as long as it is needed to provide the creator's kits and reports, and is deleted when the account is disconnected or on request. Full instructions, including self-service and email options, are on our Instagram Data Deletion page.

Questions

For any question about data access, privacy, or deletion, contact us at hello@ezrakits.com.